How severe is CVE-2025-25724?

CVE-2025-25724 has a CVSS 3.x base score of 4.0, rated medium severity. It is exploitable over local access with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.

Is CVE-2025-25724 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-25724?

CVE-2025-25724 affects Libarchive. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-25724?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-25724 have an EU (EUVD) identifier?

Yes. CVE-2025-25724 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-5869.

When was CVE-2025-25724 published?

CVE-2025-25724 was published on 2025-03-02 and last updated on 2026-06-17.

CVE-2025-25724

CVE-2025-25724 is a medium-severity vulnerability in Libarchive with a CVSS 3.x base score of 4.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-252.

Key facts

Severity: Medium (CVSS 3.x base score 4.0)
EPSS exploit prediction: 0% (26th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-5869
Weakness: CWE-252
Affected product: Libarchive
Published: 2025-03-02
Last modified: 2026-06-17

Description

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.

Frequently asked questions

What is CVE-2025-25724?: list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
How severe is CVE-2025-25724?: CVE-2025-25724 has a CVSS 3.x base score of 4.0, rated medium severity. It is exploitable over local access with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.
Is CVE-2025-25724 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (26th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-25724?: CVE-2025-25724 affects Libarchive. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-25724?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-25724 have an EU (EUVD) identifier?: Yes. CVE-2025-25724 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-5869.
When was CVE-2025-25724 published?: CVE-2025-25724 was published on 2025-03-02 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*

More vulnerabilities in Libarchive

CVE-2022-36227 — Critical (CVSS 9.8): In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with…
CVE-2024-37407 — Critical (CVSS 9.1): Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is…
CVE-2020-9308 — High (CVSS 8.8): archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or…
CVE-2018-1000878 — High (CVSS 8.8): libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-416:…
CVE-2018-1000877 — High (CVSS 8.8): libarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0 onwards) contains a CWE-415:…
CVE-2016-1541 — High (CVSS 8.8): Heap-based buffer overflow in the zip_read_mac_metadata function in archive_read_support_format_zip.c in libarchive…

All CVEs affecting Libarchive →

Other CWE-252 vulnerabilities

CVE-2025-66565 — Critical (CVSS 9.8): Fiber Utils is a collection of common functions created for Fiber. In versions 2.0.0-rc.3 and below, when the system's…
CVE-2021-38171 — Critical (CVSS 9.8): adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a…
CVE-2021-26955 — Critical (CVSS 9.8): An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because…
CVE-1999-0199 — Critical (CVSS 9.8): manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return…
CVE-2019-15900 — Critical (CVSS 9.8): An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without…
CVE-2010-0211 — Critical (CVSS 9.8): The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the…

Browse all CWE-252 vulnerabilities →